pin action versions to commit hashes of releases

Author: zacharyburnett

.github/workflows/build.yml

@@ -22,9 +22,9 @@ jobs:
           - windows-latest
     runs-on: ${{ matrix.runs-on }}
     steps:
-      - uses: actions/checkout@v5
-      - uses: pypa/[email protected]
-      - uses: actions/upload-artifact@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: pypa/cibuildwheel@7940a4c0e76eb2030e473a5f864f291f63ee879b # v2.21.3
+      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: wheel-s2geometry-${{ matrix.runs-on }}
           path: ./wheelhouse/*.whl